Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension block without validating its allocated size.

The remote Redhat Enterprise Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:9693 advisory.

    The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software     Development Kit.

    Security Fix(es):

    * JDK: Enhance crypto algorithm support (CVE-2026-22007)

    * JDK: Improved Arena allocations (CVE-2026-22008)

    * JDK: Improve Kerberos credentialing (CVE-2026-22013)

    * JDK: Enhance Path Factories Redux (CVE-2026-22016)

    * JDK: Enhance Zip file reading (CVE-2026-22018)

    * JDK: Enhance certificate chain validation (CVE-2026-22021)

    * JDK: Updating FreeType 2.14.1 (CVE-2026-23865)

    * JDK: Enhance TLS connection handling (CVE-2026-34282)

    * JDK: Enhance key generation (CVE-2026-34268)

    This release also updates a number of third-party libraries included in the JDK.  The libraries themselves     are affected by the following CVEs, but this is not a statement that the JDK itself is affected:

    * giflib: Denial of Service via buffer overflow in EGifGCBToExtension (CVE-2026-26740)

    * libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette     expansion (CVE-2026-33636)

    * libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416)

    Bug Fix(es):

    * When copying files, OpenJDK 25 prefers to use the copy_file_range native function for performance     reasons, only falling back to sendfile when this fails.  However, in previous OpenJDK 25 releases, a     response of EOPNOTSUPP (operation not supported) did not cause the JDK to fall back to sendfile.  This is     rectified in this release. (RHEL-169939, RHEL-169937)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 / 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:9254 advisory.

    The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java     Software Development Kit.

    This release contains OpenJDK 11 with Extended Lifecycle Support for Red Hat Enterprise Linux versions 7,     8, and 9.

    Security Fix(es):

    * JDK: LIBPNG: out-of-bounds read in png_image_read_composite (CVE-2025-66293)
    * JDK: LIBPNG: Information disclosure and denial of service via integer truncation in simplified write API     (CVE-2026-22801)
    * JDK: LIBPNG: has a heap buffer overflow in png_set_quantize (CVE-2026-25646)
    * JDK: GIFLIB: Denial of Service via buffer overflow in EGifGCBToExtension (CVE-2026-26740)
    * JDK: LIBPNG: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416)
    * JDK: LIBPNG: Information disclosure and denial of service via out-of-bounds read/write in Neon palette     expansion (CVE-2026-33636)
    * JDK: Denial of service and information disclosure via heap buffer over-read in png_image_finish_read     (CVE-2026-22695)

    * JDK: (CVE-2026-22007)
    * JDK: (CVE-2026-22016)
    * JDK: (CVE-2026-22013)
    * JDK: (CVE-2026-22018)
    * JDK: (CVE-2026-22021)
    * JDK: (CVE-2026-34268)
    * JDK: (CVE-2026-34282)
    * JDK: (CVE-2026-23865)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via     the EGifGCBToExtension overwriting an existing Graphic Control Extension block without validating its     allocated size. (CVE-2026-26740)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
309745	RHEL 10 / 9 : java-25-openjdk (RHSA-2026:9693)	Nessus	Red Hat Local Security Checks	high
309659	RHEL 7 / 8 / 9 : Java 11 OpenJDK ELS Security Update (Important) (RHSA-2026:9254)	Nessus	Red Hat Local Security Checks	high
302946	Linux Distros Unpatched Vulnerability : CVE-2026-26740	Nessus	Misc.	high

Detections

Analytics

CVE-2026-26740

high

Tenable Plugins

high

high

high